Rotate the signing secret
Mints a new signing secret and returns the plaintext once. The previous secret remains valid for inbound signature verification for 24 hours after rotation, then is destroyed (sweeper job). Outgoing deliveries sign with the current secret only; Kordio does not dual-sign.
Re-rotating before the prior overlap window closes is rejected
with rotation_in_progress (409) to prevent a 3-key chain.
Body accepts no params today; Idempotency-Key header supported.
Authorizations
Same flow; ledger:write is required for any mutation.
Headers
Required on writes. Stable identifier you choose. The same key
always returns the same transaction, forever. Can also be supplied as
idempotency_key in the request body. Header wins.
Allowed character set: A-Z, a-z, 0-9, _, :, ., -.
Max 255 bytes. Replays of an accepted key return the original
response with header Idempotent-Replayed: true so callers can
tell a replay from a freshly-committed result.
1 - 255^[A-Za-z0-9_:.\-]+$"pi_acme_1234_capture"
Path Parameters
Response
Rotated. Body includes one-time signing_secret.
Discriminator naming the shape of this resource (e.g. account, transaction).
webhook_endpoint "account"
New plaintext signing secret. Shown only on this response.
UTC timestamp 24h in the future. The previous secret continues to verify inbound signatures until then.